$ rpki-client -vvf repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft File: B1F0A7585ED1882783C6AF802B826607ABB92671.mft (raw, json) Hash identifier: 7rrNzOb4fsVXEAC8jJxluSiWA9SwWrjFGoHpfSaulhY= Subject key identifier: 1E:9D:3B:F6:64:2D:58:8A:FB:FF:88:01:E9:E8:DE:B5:FD:84:49:13 Authority key identifier: B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 Certificate issuer: /CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Certificate serial: 027EC8932E2AED38505A999741D2E8C0DF882E22 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft Manifest number: F0 Signing time: Sun 01 Mar 2026 12:02:36 +0000 Manifest this update: Sun 01 Mar 2026 11:57:36 +0000 Manifest next update: Wed 04 Mar 2026 22:58:36 +0000 Files and hashes: 1: 3136302e3138372e33362e302f32342d3234203d3e20313533333237.roa (hash: W6x4NYRtAG+Mf6fIyPCm/XsF8bO9fqqOCjC78Il5Kyw=) 2: 3136302e3138372e33372e302f32342d3234203d3e20313533333237.roa (hash: HwU0+K4pKIjqZ0rwzIAxU1cLuPfwooIJjDIs7VIOPKk=) 3: B1F0A7585ED1882783C6AF802B826607ABB92671.crl (hash: WP4ayhXa3rrd/UfRWd3cjp2/fLvRAjiAXbwjAIpLZAU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:58:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7e:c8:93:2e:2a:ed:38:50:5a:99:97:41:d2:e8:c0:df:88:2e:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1F0A7585ED1882783C6AF802B826607ABB92671 Validity Not Before: Mar 1 11:57:36 2026 GMT Not After : Mar 4 22:58:36 2026 GMT Subject: CN=1E9D3BF6642D588AFBFF8801E9E8DEB5FD844913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1c:22:c6:d8:40:c1:1f:d7:b0:ad:e4:53:cb: 2c:b1:8e:98:d9:f4:05:9e:a5:fe:08:bc:87:f5:18: f6:40:22:3e:e9:ad:4e:80:6e:ae:75:bb:21:27:cb: f8:a1:fd:97:ea:dd:f6:4a:c6:d8:3a:1b:39:22:aa: 13:1d:c3:63:31:0d:ab:94:59:6d:38:ff:88:8b:71: e5:ba:bf:e6:1b:c6:84:84:bf:2a:fb:c8:1a:9c:cc: 69:bb:dc:5b:2b:0a:91:d3:5d:eb:9b:5e:64:df:26: 44:77:c1:1b:5a:e6:2c:59:bf:5a:d9:aa:25:01:14: 5d:ee:b7:5b:dd:f6:1f:e3:79:4b:08:1e:08:3a:c4: a4:3e:07:04:83:51:0e:aa:aa:30:c1:b1:24:84:6e: 49:e3:9e:72:e6:ce:90:30:70:22:03:4b:a8:36:a4: 9e:bd:48:95:e4:0c:72:8f:5a:59:82:33:58:ac:54: 21:a8:ea:63:13:01:78:63:cc:33:c1:91:b4:4b:c1: 5d:cb:02:f7:89:44:7d:7b:23:c0:75:54:81:c0:f8: 70:91:cd:97:ce:c7:44:cb:09:6e:d9:3f:65:6c:8d: 4e:2c:99:98:5b:b2:5b:d6:5d:e0:68:e7:b7:11:63: ee:82:5d:ea:bd:f1:2b:5b:ac:d9:c4:6a:74:9e:1c: 80:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:9D:3B:F6:64:2D:58:8A:FB:FF:88:01:E9:E8:DE:B5:FD:84:49:13 X509v3 Authority Key Identifier: keyid:B1:F0:A7:58:5E:D1:88:27:83:C6:AF:80:2B:82:66:07:AB:B9:26:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B1F0A7585ED1882783C6AF802B826607ABB92671.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38913893-5f64-4a5e-a8d2-5d51ebde473f/0/B1F0A7585ED1882783C6AF802B826607ABB92671.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:bd:e2:27:e6:74:72:13:e6:65:d9:43:72:29:a9:a0:5e:a0: 65:c6:07:72:98:fe:7a:36:ca:63:20:c8:de:d7:84:0e:44:2b: 31:fa:6f:8a:24:45:1a:60:57:71:d6:8e:56:d9:2a:0e:67:f2: 94:c5:b5:31:c1:a0:dc:98:e5:f4:49:36:e1:61:70:68:55:12: e2:40:0f:37:7a:b6:15:e6:53:e6:34:a2:f1:f4:f3:64:3b:ee: 11:f5:e7:e8:86:1f:a8:20:91:e1:27:f2:16:38:74:79:ea:0a: b2:f7:8c:b1:0d:57:ab:85:75:96:71:85:d9:f7:84:0b:19:3b: 82:33:af:5f:8a:7d:9d:ac:da:ba:7a:83:c6:4e:ee:a9:e2:f0: 9c:1d:51:7a:60:dd:44:02:82:4f:63:e9:16:8c:e0:de:d9:08: 93:b5:ba:2d:67:1f:df:f9:9f:55:ae:62:36:e3:81:75:3a:7c: 34:a3:18:9d:45:66:d8:6f:58:0a:c1:1d:4b:90:2a:2b:3f:c8: 82:0c:79:cc:55:17:70:a2:c6:a8:7b:c8:e8:6e:b9:8e:5b:a9: 4b:d7:4b:d1:d9:8f:af:e7:9b:03:c5:f0:3b:56:43:9b:d9:1a: 7d:22:14:39:d6:1f:54:6e:4f:19:11:aa:0a:fe:38:e7:fb:97: 4a:fb:16:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAn7Iky4q7ThQWpmXQdLowN+ILiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdB QkI5MjY3MTAeFw0yNjAzMDExMTU3MzZaFw0yNjAzMDQyMjU4MzZaMDMxMTAvBgNV BAMTKDFFOUQzQkY2NjQyRDU4OEFGQkZGODgwMUU5RThERUI1RkQ4NDQ5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvHCLG2EDBH9ewreRTyyyxjpjZ 9AWepf4IvIf1GPZAIj7prU6Abq51uyEny/ih/Zfq3fZKxtg6GzkiqhMdw2MxDauU WW04/4iLceW6v+YbxoSEvyr7yBqczGm73FsrCpHTXeubXmTfJkR3wRta5ixZv1rZ qiUBFF3ut1vd9h/jeUsIHgg6xKQ+BwSDUQ6qqjDBsSSEbknjnnLmzpAwcCIDS6g2 pJ69SJXkDHKPWlmCM1isVCGo6mMTAXhjzDPBkbRLwV3LAveJRH17I8B1VIHA+HCR zZfOx0TLCW7ZP2VsjU4smZhbslvWXeBo57cRY+6CXeq98StbrNnEanSeHIDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHp079mQtWIr7/4gB6ejetf2ESRMwHwYDVR0j BBgwFoAUsfCnWF7RiCeDxq+AK4JmB6u5JnEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODkxMzg5My01ZjY0LTRhNWUtYThkMi01ZDUxZWJkZTQ3M2YvMC9CMUYwQTc1ODVF RDE4ODI3ODNDNkFGODAyQjgyNjYwN0FCQjkyNjcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2MDdBQkI5 MjY3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg5MTM4OTMtNWY2NC00YTVlLWE4 ZDItNWQ1MWViZGU0NzNmLzAvQjFGMEE3NTg1RUQxODgyNzgzQzZBRjgwMkI4MjY2 MDdBQkI5MjY3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACa94ifmdHIT5mXZQ3IpqaBeoGXGB3KY/no2 ymMgyN7XhA5EKzH6b4okRRpgV3HWjlbZKg5n8pTFtTHBoNyY5fRJNuFhcGhVEuJA Dzd6thXmU+Y0ovH082Q77hH15+iGH6ggkeEn8hY4dHnqCrL3jLENV6uFdZZxhdn3 hAsZO4Izr1+KfZ2s2rp6g8ZO7qni8JwdUXpg3UQCgk9j6RaM4N7ZCJO1ui1nH9/5 n1WuYjbjgXU6fDSjGJ1FZthvWArBHUuQKis/yIIMecxVF3Cixqh7yOhuuY5bqUvX S9HZj6/nmwPF8DtWQ5vZGn0iFDnWH1RuTxkRqgr+OOf7l0r7FpA= -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:41 2026 by rpki-client